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AMENDMENTS TO TITK CLAIMS 

The listing of claims will replace all prior versions, and listings, of claims in the 
application: 
Listing of Claims: 

L (Currently Amended) In a data center capable of communicating with a 

remote enterprise network, a method for enabling a user to access network data or the remote 
enterprise network through a data tunnel between the data center and the remote enterprise 
network that operates as a virtual private network, the method comprising the acts of: 

in response to receiving a data Re qu est from the remote enterprise n et work , 
establishing the [[a]] data tunnel with the f[a]] remote enterprise network by transmitting 
reply data to the remote enterprise network, the data tunnel operating as a virtual private 
network through a firewall of the remote enterprise ne tw ork without requiring a virtual 
private network n ode to be placed at the firewall : 

continuing to transmit t ransmitting o ageing the reply data to the remote enterprise 
network in an ongoing manner such that the data tunnel ^ hamrel is kept open; 

receiving an access request from a user for network data from the remote 
enterprise network; 

transmitting the access request to the remote enterprise network using the existing 
data tunnel that has be e n established and exists prior to the data center having receive d 
the access request : 

receiving the network data from the remote enterprise network in response to the 
access request; and 

transmitting the network data to the user. 
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2. (Previously Presented) A method as defined in claim 1, wherein the access 
request is received by a designated server, and wherein the designated server is one of multiple 
servers of the data center. 

3. (Previously Presented) A method as defined in claim 2, wherein a database 
of the remote enterprise network is notified which of the multiple servers is the designated 
server, the designated server notifying the database when the data tunnel is established. 

4. (Original) A method as defined in claim 3, wherein the access request is 
received by a designated telephony node of the data center, and wherein the user generates the 
access request using a telephone system. 

5. (Original) A method as defined in claim 3» wherein the access request is 
received by one of multiple servers of the data center over the Internet, and wherein the access 
request is generated by the user using a device connected to the Internet, 

6. (Original) A method as defined in claim 4, wherein the designated telephony 
node of the data center transmits the access request to the designated server. 

7. (Original) A method as defined in claim 6, wherein the designated telephony 
■ ■ J node determines which of the multiple servers is the designated server by communicating with at 

least one of the multiple servers. 
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3. (Original) A method as defined in claim 6, wherein the designated telephony 
node determines which of Hie multiple servers is the designated server by communicating with 
the database. 

9. (Original) A method as defined in claim 1, wherein the act of receiving an 
access request to access network data of the remote enterprise network from the user further 
comprises the act of authenticating the identity of the user. 

10. (Original) A method as defined in claim 9, wherein authenticating the identity 
of the user comprises the act of receiving a valid personal identification number, 

1 1. (Original) A method as defined in claim 4, wherein the act of transmitting the 
network data to the user includes the acts of: 

transmitting the network data from the designated server to the designated 
telephony node; and 

transmitting the network data from the designated telephony node to the telephone 
system used by the user. 

12. (Original) A method as defined in claim 5, wherein the act of transmitting the 
network data to the user includes the act of transmitting the network data from the designated . 
server to the device that is connected to the Internet. 
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13. 


(Currently Amended) 


Tn ail enterprise network capable of communicating 


with a remote data center network, a method for enabling a user to access network data of the 
enterprise network through a data tunnel between the remote data center and the enterprise 
network that operates as a virtual private network, the method comprising the acts of 
transmitting a data request to the remote data center; 

rc ccivinu reply data that has been transmitted bv the remote data cen ter in 
respon se to the data request and tha t establishes the to-estab lioh a data tunnel with the 
remote data cente r, the data tunnel operating as a vir tual private network through a 
firewall of the enterprise network without requiring a virtual private network node to be 
placed at the firewall : 

receiving the ongoing reply data from the remote data center in a n ongoing 
Uianncr response* to- t h e data requeot, such that the data tunnel is kept open between-the 
rem ote^tefgn eontor and tho enterpri se- net work, the data tunnel o perating as a virtunl 


receiving, from the remote data center, an access request to access network data 
of the enterprise network, the access request having been received by the remote data 
center from the user and thereafter transmitted by the remote data center lo the enterprise 
network through the pro op ened data tunnel that has bee n est ablished and exist s prior to 
the remote da ta c enter having received the a ccess request : and 

in response to the access request, transmitting the network data to the remote data 
center such that the user is enabled to access the network data. 
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1 4. (Original) A method as defined in claim 1 3, wherein Ihe data request includes 
a uniform resource identifier. 

15. (Currently Amended) A method as defined in claim 13, wherein the data request 
is transmitted through [[a]] the firewall. 

16. (Original) A method as defined in claim 15 s wherein the data request is 
transmitted through a proxy server, 

17. (Original) A method as defined in claim 13, wherein the reply data is 
received through port 443. 

18. (Original) A method as defined in claim 17, wherein the reply data is 
received using Secure Sockets Layer protocol. 

19. (Original) A method as defined in claim 13, wherein the reply data is 
received through port SO. 
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20. (Original) A method as defined in claim 13, wherein the act of transmitting 
the network data to the remote data center includes the acts of: 

encrypting the network data to comply with Secure Sockets Layer protocol, 
transmitting the network data to the remote data center through a second data 

tunnel, such that the transmission of the network data operates as a temporary virtual 

private network; and 

closing the second data tunnel. 

21. (Original) A method as defined in claim 13, wherein upon receiving the 
access request, the method further comprises the act of: 

performing an act upon the network data. 

22. (Original) A method as defined in claim 21, wherein performing an act upon 
the network data includes retrieving email message data. 
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23. 


(Currently Amended) 


In a dala center capable of communicating with a 


remote enterprise network, a method for enabling a user to access network data of the remote 
enterprise network through a data tunnel between the data center and the remote enterprise 
network that operates as a virtual private network, the method comprising the acts of: 

receiving, from the remote enterprise network, a uniform resource identifier 
associated with a resource of a server of the data center to-establ-ish- a data tunnol with the 



in response to receiving the uniform resource identifier, invoking the resource to 
establish the data tunnel with the remote enterprise network by trans mitting g e n e rat e 


the remote enterprise networ k in an ongoin g manner, such that the data tunnel is kept 
open between the data center and the remote enterprise network, the data tunnel operating 
as a virtual private network throug h a firewall of the remote enterprise ne twor k without 
requiring a virtual private ne t work node to he placed at the firew all: 

receiving an access request to access network data of the remote enterprise 
network from the user; 

inserting the access request into the ongoing reply data on the pr -e-opene d data 
ehannel and transmitting the access request to the remote enterprise network using the 
data tunnel that has b een est ablished and exists prior to the data center hav ing received 
the access r equest: 

receiving the network data from the remote enterprise network in response to the 
access request; and 

transmitting the network data to the user. 
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24. (Original) A method as defined in claim 23, wherein the act of receiving the 
network data from the remote enterprise network comprises the act of receiving through a second 
data tunnel the network data from the remote enterprise network, the second dala tunnel 
operating as a temporary virtual private network is closed after the network data is received by 
the dala center. 

25. (Original) A method as defined in claim 23, wherein the act of transmitting 
the access request to the remote enterprise network comprises the act of transmitting the access 
requcsl tising Secure Sockets Layer protocol. 

26. (Original) A method as defined in claim 23, wherein the act of receiving an 
access request to access network data of the remote enterprise network from the user further 
comprises the act of authenticating the identity of the user. 

27> (Original) A method as defined in claim 26, wherein authenticating the 
identity of the user comprises the act of receiving a valid personal identification number. 
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28. (Currently Amended) A computer program product for implementing in a 

data center a method for enabling a user to access network data of a remote enterprise network 
through a data tunnel between the data center and the remote enterprise network that operates as 
a virtual private network, the computer program product comprising: 

a computer-readable medium carrying computer-executable instructions for 
implementing the method, the computer-executable instructions comprising: 

program code means for establishing [[a]] thedata tunnel with [[a] J the 
remote enterprise networ k by transmitting reply data to the remote enterprise 
net work in response to receivin g a data request from the remote ente rprise 
network, the data tunnel operating as a virtual private networ k through a firewall 
QLLla^remote c ntcrorisc network without requ iring a virtual privale network n ode 
to he placed at the firew all; 

program code mean s for continuing to transmit 4 Fmsmkt4ng^g€>iflg the 
reply data to the remote enterprise network in an ongoing manne r such that the 
data tun nel c harael is kept open; 

program code means for receiving an access request from a user for 
network data from the remote enterprise network; 

program code means for transmitting the access request to the remote 
enterprise network using the existing data tunnel that h as "be en established an d 
exists prior to the data center having rec e ived the access req uest: 

program code means for receiving the network data from the remote 
enterprise network in response to the access request; and 

program code means for transmitting the network data to the user. 
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29. (Original) A computer program product as defined in claim 28, wherein the 
computer-executable instructions Further comprise program code means for authenticating the 
identity oF the user. 

30. (Original) A computer program product as defined in claim 28, wherein the 
computer-executable instructions further comprise program code. moans for enabling telephony 
nodes of the data center to receive the access request and to transmit the access request to a 
designated server, wherein the designated server is transmitting the ongoing reply data to the 
remote enterprise network. 

31. (Original) A computer program product as defined in claim 30, wherein the 
designated server is one of multiple servers of the data center, and wherein the user generates the 
access request using a telephone system. 

32. (Original) A computer program product as defined in claim 28, wherein the 
computer-executable instructions further comprise program code means for caching a copy of 
network data in a database of the data center, 

33. (Original) A computer program product as defined in claim 32, wherein the 
computer-executable instructions further comprise program code means for transmitting the 
cached copy oTlhc network data to the user in response to receiving the access request from the 
user. 
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34, (Currently Amended) In an enterprise network capable of 

communicating with a remote data center, a method for enabling a user to manipulate network 
data of the enterprise network through a data tunnel between the remote data center and the 
cnteiprise network that operates as a virtual private network, the method comprising the acts of 

transmitting a data request to the remote data center; 

r eceiving reply data that has been transmitted by the remote da ta center in 
response to the data req uest and that establishes the to establish u daia tunnel with the 
remote data cente r, the data tunnel operatin g a s a virtual private network through a 
firewall of the ente rprise network without requiring a virtual private network node to be 
pUic^„aUhp_fircwall; 

receivingjhe en going reply data from the remote data center in an ongoing 
manner re sponse to the data reques t such that the data tunnel is kept open betweeivtf*e 
remote d ata-eenter^nd-then^ter priao network, the d a*ft-tunnel-op6i=ati rtg as a virtu al 
fHwote -network; 

receiving, from the remote data center, a user request for an act to be performed 
on network data of the enterprise network, the user request having been received by the 
remote data center from the user and thereafter transmitted by the remote data center to 
the enterprise network through the p bj opened data tunnel that has been estab lish ed an d 
exists prior to th e data center havin p recei ved the user request : and 

upon receiving the user request* performing the act on network data of the 
enterprise network. 
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35. (Previously Presented) A method as defined in claim 34, wherein 
performing an act upon the network data includes deleting email. 

36. (Previously Presented) A method as defined in claim 35, wherein 
performing an act upon the network data includes faxing the network data to the user. 

37. (Previously Presented) A method as defined in claim 35, wherein 
performing an act upon the network data includes retrieving a web page* 

38. (Previously Presented) A method as defined in claim 35, wherein 
performing an act upon the network data includes retrieving email messages. 
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39. (Currently Amended) In a data center capable of communicating with a 
remote enterprise network, a method for enabling a user to access network data of the remote 
enterprise network through a data tunnel between the data center and the remote enterprise 
network that operates as a virtual private network, the method comprising: 

eslablishingjhs [[a]] data tunnel wit h the [[a]] remote enterprise networ k bv 
transmitting reply data to the remote enterprise network in response to receivin g a flat a 
request from the remote enterprise network : 

co^tipuing^o transmit t ransmitti ng-eftgomg the reply data to the remote enterprise 
network in an ongoing manner to keep the data tunnel open; 

receiving network data from the remote enterprise network through the data 
tunnel that-is-establis h e d b e tw e en the data center and tho -remote -en t e rpris e n e twork ,, the 
data tunnel operating as a virtual private network through a fi re wall of tho enterprise 
network without requiring a virtua l p rivate network node to be placed a t t he firewall : 

caching a copy of the network data in a database of the data center, 

receiving an access request to access network data of the remote enterprise 
network from the user; 

retrieving the network data from the database in response to the access request; 

and 

transmitting the network data to the user. 

40. (Original) A method as defined in claim 39, wherein the network data of the 
enterprise network is disconnected from the enterprise network after the network data is received 
by the data center. 
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41 . (Original) A method as defined in claim 39, wherein the network data of the 
enterprise network is disconnected from the user after the network data is received by the data 
center. 

42. (Original) A method as defined in claim 39, wherein the user determines what 
network data is transmitted to the data center, and wherein the user determines what network 
data is cached in the database. 

43. (Original) A method as defined in claim 39, wherein the act of receiving an 
access request to access network data of the remote enterprise network from tho user further 
comprises the act of authenticating the identity of the user 

44. (Original) A method as defined in claim 39, wherein the access request 
comprises a command to update network data. 

45. (Previously Presented) A method as defined in claim 44> further 
comprising the acts of updating the cached copy of network data, and transmitting update 
information to the enterprise network. 

Claims 46-48. (Canceled) 
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